Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ecda1a-1702-407c-b149-89eb98748359/1/tN8fOLWQL3d9NT7xo6lO5l3rjTA.roa
File: tN8fOLWQL3d9NT7xo6lO5l3rjTA.roa (raw, json)
Hash identifier: pkp39HZ9LX4P5x1M2RqpRPfXCSD+IdPvo0DrLUm5kuM=
Subject key identifier: B4:DF:1F:38:B5:90:2F:77:7D:35:3E:F1:A3:A9:4E:E6:5D:EB:8D:30
Certificate issuer: /CN=8e56dbd6822a32e3b3443253e57b7f25d250944d
Certificate serial: 0185714C1A7F143C19100B1B4B06A859D98D
Authority key identifier: 8E:56:DB:D6:82:2A:32:E3:B3:44:32:53:E5:7B:7F:25:D2:50:94:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlbb1oIqMuOzRDJT5Xt_JdJQlE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/ecda1a-1702-407c-b149-89eb98748359/1/tN8fOLWQL3d9NT7xo6lO5l3rjTA.roa
Signing time: Mon 02 Jan 2023 07:04:50 +0000
ROA not before: Mon 02 Jan 2023 07:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204957
IP address blocks: 193.162.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:1a:7f:14:3c:19:10:0b:1b:4b:06:a8:59:d9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e56dbd6822a32e3b3443253e57b7f25d250944d
Validity
Not Before: Jan 2 07:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4df1f38b5902f777d353ef1a3a94ee65deb8d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:62:a3:43:df:0a:5c:dd:2c:0e:b3:8e:55:78:
de:2e:fd:5c:d9:8b:ca:09:b7:68:00:0d:2a:91:b4:
48:7d:19:f6:0e:80:e2:d9:c0:7f:31:2b:b8:4c:75:
ff:11:28:9b:4e:ec:6d:e1:4b:8d:2f:16:15:14:bd:
ea:72:f0:76:4e:8b:29:14:78:ed:d7:0f:ad:89:55:
de:3b:fd:d9:25:e5:b4:87:90:d7:51:10:b1:aa:8f:
a6:d1:72:8e:db:98:7d:6f:bc:4b:4c:80:a7:d8:e3:
09:07:8f:e3:41:35:4e:be:54:6a:e9:d9:a4:d4:16:
10:70:04:9c:dd:fb:52:5c:8d:c9:17:0b:6c:b3:d3:
38:7f:63:e1:e5:48:a7:a3:ee:b4:71:ed:fe:1c:c4:
8a:e8:8a:1a:c7:cc:d4:c4:7e:3c:36:c8:e1:43:86:
c5:61:5c:dd:fb:3c:aa:bd:f4:77:2e:62:3d:70:34:
b9:ad:03:09:92:83:a7:78:4f:3e:b4:63:9f:60:26:
5c:63:0d:ac:93:2a:d4:b9:0b:c6:3e:cd:60:5b:dd:
e4:ca:38:59:95:12:b5:0a:e4:61:f3:08:d9:1a:d9:
42:3b:e6:3e:06:c8:8b:38:7a:40:2d:7f:e1:4b:6f:
07:1f:ef:30:33:d4:85:66:48:1b:c6:4e:65:2c:ee:
7e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DF:1F:38:B5:90:2F:77:7D:35:3E:F1:A3:A9:4E:E6:5D:EB:8D:30
X509v3 Authority Key Identifier:
keyid:8E:56:DB:D6:82:2A:32:E3:B3:44:32:53:E5:7B:7F:25:D2:50:94:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlbb1oIqMuOzRDJT5Xt_JdJQlE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ecda1a-1702-407c-b149-89eb98748359/1/tN8fOLWQL3d9NT7xo6lO5l3rjTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ecda1a-1702-407c-b149-89eb98748359/1/jlbb1oIqMuOzRDJT5Xt_JdJQlE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.47.0/24
Signature Algorithm: sha256WithRSAEncryption
72:b9:18:9a:62:be:69:bb:a6:85:b5:51:b7:59:c2:2b:fb:4e:
15:7d:ff:9e:48:84:a0:27:d8:6e:04:1e:fe:1c:50:dd:bb:3d:
9a:71:a3:0d:8c:a9:f3:c6:2d:1b:45:f1:f8:db:60:51:b8:25:
73:f4:9c:d5:11:b8:8a:77:9b:2b:09:ae:e8:4b:7c:fb:85:42:
00:6c:c2:2d:ad:a0:8a:3d:ab:a2:4b:42:f6:09:e5:81:60:c3:
97:63:a5:46:82:d0:a6:11:57:9d:ed:86:8b:2d:6d:89:bc:2d:
d3:48:06:27:34:49:8b:40:92:2a:be:dc:f2:40:34:5c:20:ca:
00:ca:ed:77:fe:28:2b:aa:cd:d8:41:0a:99:24:14:2d:10:5a:
e8:9a:71:20:24:03:93:f4:26:31:67:f0:b4:dc:32:85:f7:72:
1c:a7:61:00:6d:67:a1:56:3f:e0:2e:00:45:03:7e:88:28:a9:
97:a0:c0:34:09:a7:00:bf:3b:a0:32:66:fd:59:8d:74:df:3b:
d6:28:80:99:e2:b8:7f:88:d5:60:06:8b:fc:30:4f:23:60:8c:
5e:34:74:78:01:bd:c1:80:36:61:e1:b9:ca:e6:29:37:56:d3:
1c:a4:ed:c3:01:b1:84:69:85:61:2b:95:b3:48:77:e4:32:76:
e1:57:2a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:55 2025 by rpki-client